$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: 3Sw3+r4m51OkR/zINL1FO90DHbH3Bk00GK61X4WNIeM= Subject key identifier: 7F:B5:C0:AE:3F:57:D2:F7:D1:51:4C:97:70:9E:7C:D8:CC:BC:F2:DE Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 25F4E1365491531CE7B2E6278D6E0B1F00B0BBD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 03E4 Signing time: Wed 15 Apr 2026 20:01:22 +0000 Manifest this update: Wed 15 Apr 2026 19:56:22 +0000 Manifest next update: Sat 18 Apr 2026 21:05:22 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: 0RuPOatZIM37orOzZvNf+OlJ95/LGwAEv77CO5OeQU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f4:e1:36:54:91:53:1c:e7:b2:e6:27:8d:6e:0b:1f:00:b0:bb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Apr 15 19:56:22 2026 GMT Not After : Apr 18 21:05:22 2026 GMT Subject: CN=7FB5C0AE3F57D2F7D1514C97709E7CD8CCBCF2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:fb:e1:c9:1c:ec:98:79:1d:8b:38:f9:7c: 1e:85:2e:3b:d6:97:83:3a:16:59:31:c2:7d:55:70: f5:e1:57:6a:47:ce:bd:db:37:79:74:1f:37:2a:e7: 18:62:7b:0d:f1:23:52:38:dc:10:e9:e8:c0:f2:5c: 85:c6:a6:da:d1:bd:2b:98:15:98:ef:44:db:37:08: ca:19:78:c5:0b:2f:61:6b:39:39:f9:08:3a:df:17: 55:4b:7f:eb:b3:ef:1a:b4:1e:65:60:f6:f7:66:91: 73:da:46:61:9d:76:70:44:28:c1:8a:ae:a0:9f:aa: 35:e8:d6:df:73:48:f1:cf:63:8a:a5:01:8c:c0:91: 54:c6:fd:c3:4e:c0:89:99:fb:91:e4:3d:6f:f4:28: df:9e:bd:f4:0f:cf:47:0e:95:7b:c8:86:82:df:ba: bf:a5:6d:24:73:26:c6:4b:46:ba:94:2c:29:78:c8: 9f:f9:21:b8:7e:7f:22:4e:fc:d5:66:3f:ca:84:cd: ff:ae:15:8d:a8:7c:e9:9e:a5:3c:1e:e9:b0:7a:4d: 7e:0a:37:6d:59:85:2d:0b:24:6e:67:18:51:ca:dd: a2:c6:85:41:b1:bf:21:86:0b:8c:cb:51:fd:12:de: e9:e8:b5:ae:24:7d:e5:f3:7f:7f:e3:3a:8b:12:78: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B5:C0:AE:3F:57:D2:F7:D1:51:4C:97:70:9E:7C:D8:CC:BC:F2:DE X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7c:ca:f2:5b:89:86:d1:ad:3d:68:83:72:bc:8a:92:7e:c1: 71:3d:56:96:1e:df:63:6c:44:29:54:e9:b6:af:19:1f:98:32: 49:1f:56:02:b0:a1:10:0d:de:19:fb:fb:21:24:99:47:f3:38: fa:a8:de:e2:c9:0d:66:cb:c7:9e:ff:ab:8d:3b:12:e8:12:15: c5:30:be:97:f0:73:c2:4b:40:29:c4:b3:c3:fd:1c:7e:09:e0: b5:6a:4d:a4:0b:d9:f3:0f:c3:05:96:c0:99:3b:9b:63:05:db: c3:4c:82:e0:6d:71:98:51:d4:ba:92:1f:4e:f6:1f:f8:04:f7: c6:91:28:50:2c:b6:8f:aa:ca:09:7c:dc:5a:07:7a:39:53:c1: d3:bb:60:ed:38:7d:83:62:aa:bf:a1:58:7e:ae:85:6b:c0:67: 73:cc:2d:d1:2c:db:28:55:0e:97:30:33:67:03:0f:f8:30:16: b5:e2:4f:89:44:32:9b:b3:d7:bc:cb:f1:a0:e5:db:44:08:7a: 58:23:0f:a8:ad:18:b0:2c:fb:3f:bc:1d:82:9a:f9:92:77:76: 97:b1:17:e0:20:b9:82:ee:80:10:6a:db:56:1a:46:90:a7:c5: 48:f8:36:05:b8:fd:8e:54:f7:0c:e2:86:c5:f4:15:b2:7d:5f: 9d:e7:d9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfThNlSRUxznsuYnjW4LHwCwu9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNjA0MTUxOTU2MjJaFw0yNjA0MTgyMTA1MjJaMDMxMTAvBgNV BAMTKDdGQjVDMEFFM0Y1N0QyRjdEMTUxNEM5NzcwOUU3Q0Q4Q0NCQ0YyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZPvhyRzsmHkdizj5fB6FLjvW l4M6Flkxwn1VcPXhV2pHzr3bN3l0Hzcq5xhiew3xI1I43BDp6MDyXIXGptrRvSuY FZjvRNs3CMoZeMULL2FrOTn5CDrfF1VLf+uz7xq0HmVg9vdmkXPaRmGddnBEKMGK rqCfqjXo1t9zSPHPY4qlAYzAkVTG/cNOwImZ+5HkPW/0KN+evfQPz0cOlXvIhoLf ur+lbSRzJsZLRrqULCl4yJ/5Ibh+fyJO/NVmP8qEzf+uFY2ofOmepTwe6bB6TX4K N21ZhS0LJG5nGFHK3aLGhUGxvyGGC4zLUf0S3unota4kfeXzf3/jOosSeFPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7XArj9X0vfRUUyXcJ582My88t4wHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJ8yvJbiYbRrT1og3K8ipJ+wXE9VpYe32Ns RClU6bavGR+YMkkfVgKwoRAN3hn7+yEkmUfzOPqo3uLJDWbLx57/q407EugSFcUw vpfwc8JLQCnEs8P9HH4J4LVqTaQL2fMPwwWWwJk7m2MF28NMguBtcZhR1LqSH072 H/gE98aRKFAsto+qygl83FoHejlTwdO7YO04fYNiqr+hWH6uhWvAZ3PMLdEs2yhV DpcwM2cDD/gwFrXiT4lEMpuz17zL8aDl20QIelgjD6itGLAs+z+8HYKa+ZJ3dpex F+AguYLugBBq21YaRpCnxUj4NgW4/Y5U9wzihsX0FbJ9X53n2f4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:47:43 2026 by rpki-client